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filed on August 4, 2004, with this brief, from the action of the primary examiner dated July 21, 
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2004, in the above identified application. An authorization to charge a credit card for $660.00 for 
filing a notice of appeal and for filing this brief in support of the appeal for a large entity is included 
with this brief. 

I. STATUS OF CLAIMS 

Claims 1-2, 5-11, and 13-18 are pending in the application. The final form of these claims 
is enclosed as an appendix to this appeal brief. Claims 3-4 and 12 were cancelled. 

II. STATEMENT IDENTIFYING "REAL PARTY IN INTEREST" 

The real party in interest in this matter is assignee Lucent Technologies, Inc., a 
corporation of the State of Delaware, having an office at 600 Mountain Avenue, Murray Hill, New 
Jersey, 07974-0636. 

I I I. STATE ME NT IDENTIFYING RELATED APPEALS AND INTERFERENCES 

There are no other current appeals and there are no current interferences related to this 

matter. 

IV. COPIES OF APPEAL PAPERS 

One original and three copies of the appeal brief and appendix of final claims and all 
accompanying papers are enclosed. 

V. APPENDIX OF CLAIMS INVOLVED IN FINAL FORM 

An appendix of all the claims pending in the case in their final form is attached to the brief. 
(Three copies and one original of the appendix are attached to the corresponding three copies 
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and one original of the brief). 

VI. STATUS OF AMENDMENTS 

The present application, serial number 09/487,946 was filed on January 19, 2000. The 
present application as originally filed, included eight claims. In a first office action dated 
October 27, 2003, the examiner rejected (A) claims 3-4 under 35 U.S.C. 112, (B) claims 1-5 
under 35 U.S.C. 103 based on Schneier, Applied Cryptography 2 nd Edition (hereinafter 
"Schneier"), and (C) and claims 6-8 under 35 U.S.C. 103 based on Schneier in view of alleged 
admitted prior art in applicant's specification. 

The applicant amended claims 1, 3, 4, 6, and 8, and added claims 9-14 in an 
amendment dated November 12, 2003. 

In a subsequent office action, dated January 15, 2004, the examiner rejected (1) claims 
1-5 and 9-14 under 35 U.S.C. 103 based on Schneier in view of Deo, U.S. Patent No. 
5,721,781 (hereinafter "Deo") and (2) claims 6-8 under 35 U.S.C. 103 based on Schneier in 
view of Deo and further in view of alleged admitted prior art in applicant's specification. 

The applicant next filed a notice of appeal and arguments asserting the allowability of 
claims 1-14 on January 29, 2004. The notice of appeal was received by the United States 
Patent and Trademark Office on February 2, 2004. 

The examiner filed a response on March 10, 2004 rejecting the applicant's arguments. 

The applicant filed a request for continued examination on March 23, 2004 and an 
amendment, which amended claims 1, 6, 8, and 11 and cancelled claims 3, 4, and 12. 

In a subsequent office action, dated April 28, 2004, the examiner rejected (i) claims 1-2, 
5-11, and 13-14 under 35 U.S.C. 112, first paragraph and (ii) claims 1, 6, 8, and 11 under 35 
U.S.C. 112, second paragraph. 
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The applicant next filed an amendment dated May 17, 2004, which amended claims 1, 
2, 5, 6, 8, 11, 13, and 14 and added claims 15-18. 

In a subsequent office action, dated July 21, 2004, the examiner rejected (A) claims 1, 
2, 5, 9-11, 13-14, 15, and 18 under 35 U.S.C. 103(a) based on Schneier and Deo and (B) 
claims 6, 7, 8, 16, and 17 under 35 U.S.C 103(a) based on Schneier and Deo and further in 
view of alleged admitted prior art. 

Claims 1-2, 5-11, 13-18 are now pending in the case. The applicant is filing a notice of 
appeal regarding the July 21 , 2004 office action with this brief on August 4, 2004. 



VII. SUMMARY OF INVENTION 

Claim 1 of the present application specifies: 
A method comprising the steps of: 

encrypting a data message m at a transmitter processor using a primary 
transmitter secret key z, wherein z is known to the transmitter processor but not to a 
receiver processor, to form a quantity E; 

preparing a quadruplet (a n ew, bnew.Snew. E) at the transmitter processor where: 

anew = z* y° modulo p ; 

knew = 9 modulo p; 

Snew = signature c(anew.bnew,E); 
x 

where y = g modulo p, c is a random number, x is a receiver secret key of the 
receiver processor, and the parameters g, x, and p are picked using a known encryption 
method; 

wherein s n ew is a signature which is determined by using the same random 
number c that was used to determine a n ew and b n ew; 

transmitting the quadruplet (a n ew. bnew.Snew. E ^ from tlie transmitter processor 
to the receiver processor; 

verifying the signature s n ewat the receiver processor; 

decrypting anew and b n ew at the receiver processor by using the receiver secret 
key x to get the primary transmitter secret key z; 

using the primary transmitter secret key z to decrypt the quantity E and thereby 
obtaining the message m at the receiver processor. 
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Claim 1 specifies a method including using a primary transmitter secret key z to encrypt 
a data message m to form a quantity (or encryption) E. Claim 1 also specifies preparing a 
quadruplet comprised of (a ne w, b ne w, s n ew, E) and transmitting that quadruplet to a receiver 

processor. The quantities a n ew and b n ew are defined in the claim and each is a function of a 

random number c. The quantities a ne w and b ne w can be thought of as an encryption of z or a 

ciphertext representing z. The quantity s n ew is a signature which is a function of a n ew. bnew, 
and E and which is determined using the same random number c that was used to determine 
anew and b ne w- The method also includes verifying the signature s n ew at the receiver 

processor, decrypting a n ew and b n ew at the receiver processor by using a receiver secret key x 

to get the primary transmitter secret key z. The method also includes using the primary 
transmitter secret key z to decrypt the quantity E and to thereby obtain the message m at the 
receiver processor. 

Claims 2, 5, 9, 10, and 15 are dependent on claim 1 and provide one or more further 
limitations. 

Claim 6 of the present application specifies: 

6. A method comprising the steps of: 

creating a primary transmitter key z at a transmitter processor wherein the 
primary transmitter key is known to the transmitter processor but not to a receiver 
processor; 

creating a secondary transmitter key z' at the transmitter processor wherein the 
secondary transmitter key is known to the transmitter processor but not to the receiver 
processor, wherein the secondary transmitter key z' is a function of z; 

encrypting a data message m , at the transmitter processor, using the secondary 
transmitter secret key z' to form a quantity E; 

preparing a quadruplet (a n ew. b n ew» s new> E) at the transmitter processor, 

where: 
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anew = z* y° modulo p ; 

bnew = 9 modulo p; 

Snew = signature c(anew.bnew.E); 

where y = g X modulo p, c is a random number, x is a receiver secret key of the 
receiver processor, and the parameters g, x, and p are picked using a known encryption 
method; 

wherein s n ew 's a signature which is determined by using the same random 
number c that was used to determine a n ew and knew! 

transmitting the quadruplet (a ne w, b n ew>s n ew, E) from the transmitter processor 
to the receiver processor; 

verifying the signature s n ew at the receiver processor; 

decrypting a n ew and b n ew . at the receiver processor, using the receiver secret 
key x to get the primary transmitter secret key z; 

modifying the primary transmitter secret key z, at the receiver processor, to 
obtain the secondary transmitter secret key z' and using the secondary transmitter 
secret key z' to decrypt the quantity E and thereby obtaining the message m, at the 
receiver processor. 

Claim 6 specifies a method including using a secondary transmitter secret key z' to 
encrypt a data message m to form a quantity (or encryption) E. Claim 6 also specifies 

preparing a quadruplet comprised of (a n ew. bnew. Snew. E) and transmitting that quadruplet to 

a receiver processor. The quantities a ne w and b n ew are defined in the claim and each is a 

function of a random number c. The quantities a n ew and b n ew °an be thought of as an 

encryption of the primary transmitter key z or a ciphertext of z. The quantity s n ew is a signature 

which is a function of a n ew. bnew. and E and which is determined using the same random 

number c that was used to determine a n ew and b ne w- The method also includes verifying the 

signature s n ew at the receiver processor, decrypting a n ew and b n ew at the receiver processor 
by using a receiver secret key x to get the primary transmitter secret key z. The method also 
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includes modifying the primary transmitter secret key z to get the secondary transmitter key z' 
and using z' to decrypt the quantity E and to thereby obtain the message m at the receiver 
processor. 

Claims 7 and 16 are dependent on claim 6 and provide one or more further limitations. _ 
Claim 8 of the present application specifies: 
8.A method comprising the steps of: 

creating a primary transmitter key z at a transmitter processor; 
creating a secondary transmitter key z' which is a function of z, at the transmitter 
processor; 

providing a plurality of portion keys which are derived from the secondary 
transmitter key z\ at the transmitter processor; 

encrypting a data message m, at the transmitter processor, using the plurality of 
portion keys to form a quantity E; 

preparing a quadruplet (anew. bnew> s new> E). at the transmitter processor, 

where: 

anew = z*y modulo p ; 
bnew = 9 modulo pj 
Snew = signature c(anew.bnew,E); 
x 

where y = g modulo p, c is a random number, x is a receiver secret key of a 
receiver processor, and the parameters g, x, and p are picked using a known encryption 
method; 

wherein s n ew is a signature which is determined by using the same random 
number c that was used to determine a n ew and b n ew; 

transmitting the quadruplet (a n ew, t>new,Snew, E ^ from the transm ' tter processor 
to the receiver processor; 

verifying the signature s n ew at the receiver processor; 

decrypting a ne w and b n ew, at the receiver processor, using the receiver secret 
key x to get the primary transmitter secret key z; 

modifying the primary transmitter secret key z, at the receiver processor, to 
obtain the secondary transmitter secret key z' and using the secondary transmitter 
secret key z' to determine the plurality of portion keys and using the plurality of portion 
keys to decrypt the quantity E and thereby obtaining the message m, at the receiver 
processor. 

Claim 8 specifies a method including using a plurality of portion keys, which are derived 
from a secondary transmitter secret key z', to encrypt a data message m to form a quantity (or 
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encryption) E. The secondary transmitter secret key z' is a function of a primary transmitter key 
z. Claim 8 also specifies preparing a quadruplet comprised of (a n ew» b n ew. s n ew> E) and 

transmitting that quadruplet to a receiver processor. The quantities a n ew and b n ew are defined 

in the claim and each is a function of a random number c. The quantities a n ew and b n ew can 
be thought of as an encryption of the primary transmitter key z or a ciphertext of z. The 
quantity s n ew is a signature which is a function of a n ew> b ne w. and E and which is determined 

using the same random number c that was used to determine a n ew and bnew- The method 

also includes verifying the signature s n ew at the receiver processor, decrypting a n ew and bnew 

at the receiver processor by using a receiver secret key x to get the primary transmitter secret 
key z. The method also includes modifying the primary transmitter secret key z to get the 
secondary transmitter key z\ using the secondary transmitter key z' to get the portion keys, and 
using the portion keys to decrypt the quantity E and to thereby obtain the message m at the 
receiver processor. 

Claim 17 is dependent on claim 8 and provides one or more further limitations. 

Claim 1 1 of the present application specifies: 

1 1 . An apparatus comprising 
a transmitter processor; 

wherein the transmitter processor 

encrypts a data message m using a primary transmitter secret key 
z, known to the transmitter processor but not known to a receiver 
processor, to form a quantity E; and 

prepares a quadruplet (a n ew. bnew.Snew. ^ where: 
* c 

anew = z y modulo p ; 

bnew = 9 modulo pj 

Snew = signature c(anew.bnew.E); 
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where y = g X modulo p, c is a random number, x is a receiver secret key of 
the receiver processor, and the parameters g, x, and p are picked using a known 
encryption method; and 

wherein s n ew is a signature, and wherein the transmitter processor 
determines s n ew by using the same random number c that was used to 
determine anew and bnew- 

Claim 11 specifies an apparatus including a transmitter processor. The transmitter 

processor encrypts a data message m using a primary transmitter key z to form a quantity E. 

The transmitter processor also prepares a quadruplet (a ne w. bnew.snew. E ^ where a new and 
bnew are defined in the claim and are functions of a random number c. The signature s n ew is a 

function of a n ew, b n ew, and E and of the same random number c. 

Claims 13, 14, and 18 are dependent on claim 11 and also include one or more further 
limitations. 

VIII. ISSUES - REJECTIONS BY EXAMINER 

The remaining issues in the case are as follows: 

(A) Were claims 1, 2, 5, 9-11, 13, 14, 15, and 18 properly rejected under 35 U.S.C. 
103(a) based on Schneier in view of Deo?; and 

(B) Were claims 6, 7, 8, 16, and 17 properly rejected under 35 U.S.C. 103(a) based on 
Schneier in view of Deo and further in view of alleged admitted prior art ? 

IX. THE REFERENCES 

The following references are relied on by the Examiner in the rejection of the office action 
of July 21, 2004, which is currently being appealed: 
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1. Srhrwgr ApplipH Hryptnqrflphy 2 n Edition; 

2. Deo, U.S. Patent No. 5,721,781 and 

3. Alleged admitted prior art in specification of current application. 

X. BRIEF DESCRIPTION OF THE REFERENCES 

1. Schneier, Applied Cryptography 2 nd Edition (hereinafter "Schneier") 

Schneier discloses various general aspects of applied cryptography. Schneier does not 
disclose preparing a quadruplet as specified in independent claims 1,6,8, and 1 1 of the present 
application. Schneier does not disclose transmitting a quadruplet as specified in independent 
claims 1, 6, and 8 of the present application. Schneier does not disclose transmitting in a 
quadruplet both an encryption of a data message (E in the present application) and an encryption 

or ciphertext (a n ew and b n ew of the present application) of the key (z) which was used to encrypt 

the data message as specified in claim 1 of the present application. Although the examiner refers 
to various pages of Schneier, including pages 478, 513-515, in support of the examiner's 
rejections, none of the Schneier examples referred to disclose transmitting both an encrypted data 
message along with an encryption of the key used to the encrypt the data message. 

In addition, the examiner admits that (a) "...Schneier does not specify the step of 
generating a signature based on the triplet a(new), b(new), and E." (examiner's 7/21/04 office 
action, pg. 4, Ins. 9-10); (b) "... Schneier is silent on the matter of the same random number c 
being used in the key encryption step and in the signature step." (examiner's 7/21/04 office 
action, pg. 4, Ins. 20-22); (c) with regards to claims 6, 7, 8, 16, and 17 of the present application, 
the examiner states that "Schneier is silent on the matter of defining 2 private transmitter keys z 
and z' where the z'=f(z) for some function f() and z' is the key which encrypts and decrypts the 
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message M." (examiner's 7/21/04 office action, pg. 8, Ins. 5-7); and (d) with regards to claim 5 of 
the present application "...Schneier is silent on the matter of defining a function to determine the 
value of z." (examiner's 7/21/04 office action, pg. 6, Ins. 5-6). 

2. Deo, U.S. Patent No. 5,721,781 

Deo generally discloses various encryption and decryption techniques. Deo does not 
disclose preparing a quadruplet as specified in independent claims 1, 6, 8, and 11 of the present 
application. Deo does not disclose transmitting a quadruplet as specified in independent claims 1, 
6, and 8 of the present application. Deo does not disclose transmitting in a quadruplet both an 

encryption of a data message (E in the present application) and an encryption or ciphertext (a n ew 

and bnew of the present application) of the key (z) which was used to encrypt the data message 

as specified in claim 1 of the present application. Deo does not disclose generating a signature 

based on a triplet a n ew, bnew. and E as in various claims of the present application. Deo does 

not disclose using the same random number in an encryption step and in a signature step. Deo 
does not disclose providing two private transmitter keys z and z' where the z-f(z) for some 
function f() and z' is the key which encrypts and decrypts the message M. 

3. Alleged Admitted prior art in present application 

The examiner asserts that there is a statement in the present application regarding 
"truncation" which would make it obvious to define a second private transmitter key z\ 
(Examiner's 7/21/04 office action, referring to present application, pg. 12, In. 14- pg. 13, In. 3) The 
applicant respectfully asserts that the examiner is incorrect. It respectfully would not be obvious to 
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define a second private transmitter key z' merely based on the fact that a general function such as 
"truncation", may be known. 

XL ARGUMENT 

A. Point I - Claims 1, 2, 5, 9-11, 13-15, and 18 should not have been rejected 
under 35 U.S.C. 103(a) based on Schneier in view of Deo 

The examiner has rejected claims 1, 2, 5, 9-11, 13-15, and 18 under 35 U.S.C. 103(a) 
based on Schneier in view of Deo. The examiner's rejections are respectfully submitted to be 
incorrect. The rejection of claim 1 and its dependents does not stand or fall with the rejection 
of claim 1 1 and its dependents. Claim 1 and its dependents have one or more limitations 
which are different from and/or which are not shown in claim 1 1 and its dependents and which 
are not disclosed or suggested by either Schneier or Deo, as will be described below. Claim 
1 1 and its dependents have one or more limitations which are different from and/or which are 
not shown in claim 1 and its dependents and which are not disclosed or suggested by either 
Schneier or Deo, as will be described below. 

i. Claim 1 and dependents 

Claim 1 of the present application specifies a method including using a primary 
transmitter secret key z to encrypt a data message m to form a quantity (or encryption) E. 

Claim 1 also specifies preparing a quadruplet comprised of (a n ew. t>new, s n ew. E) and 

transmitting that quadruplet to a receiver processor. Neither Schneier nor Deo discloses or 
suggests preparing or transmitting such a quadruplet. 

The quantities a n ew and b n ew are defined in claim 1 of the present invention and each 

is a function of a random number c. The quantities a ne w and b ne w can be thought of as an 
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encryption of z or a ciphertext representing z. The quantity s n ew is a signature which is a 

function of a n ew. bnewi and E and which is determined using the same random number c that 

was used to determine a n ew and b n ew* Neither Schneier nor Deo discloses or suggests using 

the same random number c for both a signature s n ew and the quantities a n ew and bnew- 

The method of claim 1 of the present invention also includes verifying the signature 

snew at the receiver processor, decrypting a n ew and bnew at the receiver processor by using a 

receiver secret key x to get the primary transmitter secret key z. The method also includes 
using the primary transmitter secret key z to decrypt the quantity E and to thereby obtain the 
message m at the receiver processor. 

Neither Schneier nor Deo discloses transmitting in a quadruplet both an encryption of a 

data message (E in the present application) and an encryption or ciphertext (anew and bnew 

of 

the present application) of the key (z) which was used to encrypt the data message as specified in 
claim 1 of the present application. Although the examiner refers to various pages of Schneier, 
including pages 478, 513-515, in support of the examiner's rejections, none of the examples 
referred to disclose transmitting both an encrypted data message along with an encryption of the 
key used to the encrypt the data message. 

In addition, the examiner admits that (a) "...Schneier does not specify the step of 
generating a signature based on the triplet a(new), b(new), and E." (examiner's 7/21/04 office 
action, pg. 4, Ins. 9-10); and (b) "... Schneier is silent on the matter of the same random number c 
being used in the key encryption step and in the signature step." (examiner's 7/21/04 office 
action, pg. 4, Ins. 20-22). 
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Respectfully, the examiner comes up with many hindsight explanations for why the 
examiner feels it would be obvious to supply various limitations which are missing from Schneier 
or Deo. (Examiner's 7/21/04 office action, pgs. 3-5). However, these hindsight explanations are 
not in any way suggested by the references themselves. A suggestion is required. 

Claim 1 is submitted to be allowable for at least the above reasons. Claims 2, 5, 9, 10, 
and 15 are dependent on claim 1 and are submitted to be allowable for at least the same 
reasons. In addition, with regards to claim 5 of the present application "...Schneier is silent on the 
matter of defining a function to determine the value of z." (examiner's 7/21/04 office action, pg. 6, 
Ins. 5-6). The examiner provides no suggestion in the references for providing further limitations 
of claim 5 of the present application. Claim 5 for these additional reasons is respectfully 
submitted to not necessarily stand or fall with claim 1 or its other dependents, 
ii. Claim 11 and dependents 

Claim 1 1 specifies an apparatus including a transmitter processor. The transmitter 
processor encrypts a data message m using a primary transmitter key z to form a quantity E. 

The transmitter processor also prepares a quadruplet (a n ew, bnew.Snew. E) where a n ew and 
bnew are defined in the claim and are functions of a random number c. The signature s n ew is 

a function of a ne w. bnew. and E and of the same random number c. 

Neither Schneier nor Deo discloses or suggests preparing a quadruplet as specified in 
claim 1 1 of the present application. Neither Schneier nor Deo discloses or suggests using the 

same random number c for both a signature s n ew and the quantities a n ew and bnew- 

Claim 11 is submitted to be allowable for at least the foregoing reasons. Claims 13, 14, 
and 18 are dependent on claim 1 1 and are also submitted to be allowable for at least the above 
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reasons. 



B. Point II - Claims 6, 7, 8, 16, and 17 should not have been rejected under 35 
U.S.C. 103(a) based on Schneier in view of Deo and further in view of alleged 
admitted prior art 

The examiner has rejected claims 6, 7, 8, 16, and 17 under 35 U.S.C. 103(a) based on 
Schneier in view of Deo and further in view of alleged admitted prior art. The examiner's 
rejections are respectfully submitted to be incorrect. The rejection of claim 6 and its 
dependents does not stand or fall with the rejection of claim 8 and its dependents. Claim 6 
and its dependents have one or more limitations which are different from and/or which are not 
shown in claim 8 and its dependents and which are not disclosed or suggested by either 
Schneier, Deo, or the alleged admitted prior art, as will be described below. Claim 8 and its 
dependents have one or more limitations which are different from and/or which are not shown 
in claim 6 and its dependents and which are not disclosed or suggested by either Schneier, 
Deo, or the alleged admitted prior art as will be described below, 
i. Claim 6 and dependents 

Claim 6 specifies a method including using a secondary transmitter secret key z' to 
encrypt a data message m to form a quantity (or encryption) E. Claim 6 also specifies 

preparing a quadruplet comprised of (a n ew. bnew, s new. E) and transmitting that quadruplet to 

a receiver processor. Neither Schneier nor Deo nor the alleged admitted prior art discloses or 
suggests preparing or transmitting such a quadruplet. 

The quantities a n ew and b n ew are defined in claim 6 of the present invention and each 
is a function of a random number c. The quantities a n ew an d b n ew can be thought of as an 
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encryption of the primary transmitter key z or a ciphertext of z. The quantity s n ew is a signature 
which is a function of a n ew. bnew. and E and which is determined using the same random 
number c that was used to determine a n ew arid b n ew- Neither Schneier nor Deo nor the 

alleged admitted prior art discloses or suggests using the same random number c for both an 
encryption and a signature process. Neither Schneier nor Deo nor the alleged admitted prior 

art discloses or suggests having a signature which is a function of a n ew» bnew. and E as 
defined in claim 6 of the present invention. 

The method of claim 6 also includes verifying the signature s n ew at the receiver 

processor, decrypting a ne w and b n ew at the receiver processor by using a receiver secret key x 

to get the primary transmitter secret key z. The method also includes modifying the primary 
transmitter secret key z to get the secondary transmitter key z' and using z' to decrypt the 
quantity E and to thereby obtain the message m at the receiver processor. Neither Schneier 
nor Deo nor the alleged admitted prior art discloses or suggests decrypting to get a primary 
transmitter secret key, then modifying to get a secondary transmitter secret key, and then using 
the secondary transmitter secret key to decrypt a quantity E as defined in claim 6 of the present 
invention. 

Claim 6 is submitted to be allowable for at least the foregoing reasons. Claims 7 and 
16 are dependent on claim 6 and are submitted to be allowable for at least the same reasons, 
ii. Claim 8 and its dependents 

Claim 8 specifies a method including using a plurality of portion keys, which are derived 
from a secondary transmitter secret key z\ to encrypt a data message m to form a quantity (or 
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encryption) E. The secondary transmitter secret key z' is a function of a primary transmitter key 
z. Neither Schneier nor Deo nor the alleged admitted prior art discloses or suggests using a 
plurality of portion keys, which are derived from a secondary transmitter secret key to encrypt a 
data message m to form a quantity E, where the secondary transmitter secret key is a function 
of a primary transmitter secret key. 

Claim 8 also specifies preparing a quadruplet comprised of (a n ew, bnew, Snew ' E ^ and 

transmitting that quadruplet to a receiver processor. Neither Schneier nor Deo nor the alleged 
admitted prior art discloses or suggests preparing or transmitting such a quadruplet. 

The quantities a n ew and b n ew are defined in claim 8 of the present invention and each 

is a function of a random number c. The quantities a n ew and b n ew can be thought of as an 

encryption of the primary transmitter key z or a ciphertext of z. The quantity s n ew is a signature 

which is a function of a n ew. b n ew> and E and which is determined using the same random 

number c that was used to determine anew and b n ew- Neither Schneier nor Deo nor the 

alleged admitted prior art discloses or suggests using the same random number c for both an 
encryption and a signature process. Neither Schneier nor Deo nor the alleged admitted prior 

art discloses or suggests having a signature which is a function of a n ew, b ne w. and E as 

defined in claim 8 of the present invention. 

The method of claim 8 of the present invention also includes verifying the signature 

s n ew at the receiver processor, decrypting a n ew and b n ew at the receiver processor by using a 

receiver secret key x to get the primary transmitter secret key z. The method of claim 8 of the 
present invention also includes modifying the primary transmitter secret key z to get the 
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secondary transmitter key z\ using the secondary transmitter key z' to get the portion keys, and 
using the portion keys to decrypt the quantity E and thereby obtain the message m at the 
receiver processor. Neither Schneier nor Deo nor the alleged admitted prior art discloses or 
suggests decrypting to get a primary transmitter secret key, modifying the primary transmitter 
secret key to get a secondary transmitter secret key, using the secondary transmitter secret key 
to get portion keys, and then using the portion keys to decrypt a quantity E as define in claim 8 
of the present invention. 

Claim 8 is submitted to be allowable for at least the foregoing reasons. Claim 17 is 
dependent on claim 8 and is submitted to be allowable for at least the same reasons. 

XII. CONCLUSION 

In view of the foregoing, the remaining claims (claims 1-2, 5-1 1 , and 13-18) in the case are 
considered to be in a condition for allowance. Favorable reconsideration of this application, is 
respectfully requested. 





Respectfully submitted 
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APPENDIX OF FINAL FORM OF CLAIMS INVOLVED IN APPEAL 



1. A method comprising the steps of: 

encrypting a data message m at a transmitter processor using a primary transmitter 
secret key z, wherein z is known to the transmitter processor but not to a receiver processor, 
to form a quantity E; 

preparing a quadruplet (a ne w. b n ew, s new. E ^ at the transmitter processor where: 
* c 

anew = z y modulo p ; 
knew = 9 modulo p; 
Snew = signature c(anew.b n ew,E); 
x 

where y = g modulo p, c is a random number, x is a receiver secret key of the receiver 
processor, and the parameters g, x, and p are picked using a known encryption method; 

wherein s n ew is a signature which is determined by using the same random number c 

that was used to determine a n ew and knew! 

transmitting the quadruplet (a n ew, b n ew.Snew, E) from the transmitter processor to the 
receiver processor; 

verifying the signature s n ew at the receiver processor; 

decrypting a ne w and b n ew at the receiver processor by using the receiver secret key x 

to get the primary transmitter secret key z; 

using the primary transmitter secret key z to decrypt the quantity E and thereby 
obtaining the message m at the receiver processor. 
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2. The method of claim 1 and wherein: 

the step of decrypting a n ew and b n ew at the receiver processor using the receiver secret 

x 

key x to get the primary transmitter secret key z is comprised of computing z = a n ew/bnew • 

5. The method of claim 1 wherein: 

the primary transmitter secret key z is determined at the transmitter processor from the 

formula of z = g Y modulo p, where Y is a random value chosen from the set [0..q], where q is a 
value picked using a known encryption method. 

6. A method comprising the steps of: 

creating a primary transmitter key z at a transmitter processor wherein the primary 
transmitter key is known to the transmitter processor but not to a receiver processor; 

creating a secondary transmitter key z' at the transmitter processor wherein the 
secondary transmitter key is known to the transmitter processor but not to the receiver 
processor, wherein the secondary transmitter key z' is a function of z; 

encrypting a data message m , at the transmitter processor, using the secondary 
transmitter secret key z' to form a quantity E; 

preparing a quadruplet (a n ew. bnew.Snew. ^ at ^ e transmitter processor, where: 
anew = z* y° modulo p ; 
bnew = 9 modulo p; 
Snew = signature c(anew,b n ew,E); 

w here y = g X modulo p, c is a random number, x is a receiver secret key of the receiver 
processor, and the parameters g, x, and p are picked using a known encryption method; 
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wherein s n ew is a signature which is determined by using the same random number c 
that was used to determine a n ew and bnew; 

transmitting the quadruplet (anew, b n ew.s n ew. E ) from the transmitter processor to the 
receiver processor; 

verifying the signature s n ewat the receiver processor; 

decrypting a n ew and b n ew . at the receiver processor, using the receiver secret key x to 

get the primary transmitter secret key z; 

modifying the primary transmitter secret key z, at the receiver processor, to obtain the 
secondary transmitter secret key z 1 and using the secondary transmitter secret key z' to 
decrypt the quantity E and thereby obtaining the message m, at the receiver processor. 

7. The method of claim 6 and wherein: 

the primary transmitter key z is provided which is not of the format used for producing the 
ciphertext E; 

the secondary transmitter key z' is computed as a function of z, where the function is an 
arbitrary function. 

8. A method comprising the steps of: 

creating a primary transmitter key z at a transmitter processor; 
creating a secondary transmitter key z' which is a function of z, at the transmitter 
processor; 

providing a plurality of portion keys which are derived from the secondary transmitter 
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key z\ at the transmitter processor; 

encrypting a data message m, at the transmitter processor, using the plurality of portion 
keys to form a quantity E; 

preparing a quadruplet (a n ew. briew.Snew. E )* at the transmitter processor, where: 
* c 

anew = z y modulo p ; 

bnew ~ 9 modulo p; 

Snew = signature c(anew.bnew.E); 

where y = g modulo p, c is a random number, x is a receiver secret key of a receiver 
processor, and the parameters g, x, and p are picked using a known encryption method; 

wherein s n ew is a signature which is determined by using the same random number c 

that was used to determine a n ew and b n ew; 

transmitting the quadruplet (a n ew, b n ew,Snew, E) from the transmitter processor to the 
receiver processor; 

verifying the signature s n ewat a the receiver processor; 

decrypting a n ew and bnew, at the receiver processor, using the receiver secret key x to 

get the primary transmitter secret key z; 

modifying the primary transmitter secret key z, at the receiver processor, to obtain the 
secondary transmitter secret key z' and using the secondary transmitter secret key z' to 
determine the plurality of portion keys and using the plurality of portion keys to decrypt the 
quantity E and thereby obtaining the message m, at the receiver processor. 

9The method of claim 1 wherein 
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the signature s n ew is determined by using a Schnorr signature method. 



10. The method of claim 1 wherein 

the signature s ne w is determined using a Digital Signature Standard. 

1 1 . An apparatus comprising 

a transmitter processor; 

wherein the transmitter processor 

encrypts a data message m using a primary transmitter secret key z, 
known to the transmitter processor but not known to a receiver processor, to 
form a quantity E; and 

prepares a quadruplet (a n ew. b n ew. s new. E) where: 
anew = z * y° nriodulo p ; 
knew = 9 niodulo p; 
Snew = signature c(anew.bnew.E); 

x 

where y = g modulo p, c is a random number, x is a receiver secret key of the 

receiver processor, and the parameters g, x, and p are picked using a known encryption 
method; and 

wherein s n ew is a signature, and wherein the transmitter processor determines 
Snew by using the same random number c that was used to determine a ne w and bnew- 

13.The apparatus of claim 11 wherein 
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the transmitter processor uses a Schnorr signature method to determine s n ew- 

14. The apparatus of claim 1 1 wherein 

the transmitter processor uses a Digital Signature Standard to determine s n ew- 

15. The method of claim 1 wherein 

El Gamal encryption is used for the encrypting steps. 

16. The method of claim 6 wherein 

El Gamal encryption is used for the encrypting steps. 

17The method of claim 8 wherein 

El Gamal encryption is used for the encrypting steps. 

18.The apparatus of claim 11 wherein 

El Gamal encryption is used for encrypting. 
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